What's the third letter of the second name of your great great great great grandson divided by two?
-
Speaking of Windows, to change the password you have to provide the current, as well as the new password. I suspect the comparison is done at this stage, because storing non-hashed passwords (at least in AD) supposes to settle a special policy, which fortunately is not applied by default.
"I'm neither for nor against, on the contrary." John Middle
Thanks for that info - that did not occur to me :doh:
“That which can be asserted without evidence, can be dismissed without evidence.”
― Christopher Hitchens
-
Sander Rossel wrote:
I don't really have a choice in this :laugh:
There's always a choice; even for those without a phone, as it is not mandated by law that you own one.
Sander Rossel wrote:
There is a reset option, but it involves making a phone call and waiting for a (or two?) letter(s) with your new username and password. One can only wonder why... :~
Because they don't trust your email-address, and no-one steals letters from a letterbox - it is so much safer. It's usually delivered in a few days :)
Bastard Programmer from Hell :suss: If you can't read my code, try converting it here[^]
I have the choice to do it easy, by email. Or I can do it the hard way, visiting them at their physical address. That's not really a choice to me :laugh: Haven't you heard, your snail mail is now delivered with super secure SHA-512 encryption! :laugh:
Best, Sander Continuous Integration, Delivery, and Deployment arrgh.js - Bringing LINQ to JavaScript Object-Oriented Programming in C# Succinctly
-
I have the choice to do it easy, by email. Or I can do it the hard way, visiting them at their physical address. That's not really a choice to me :laugh: Haven't you heard, your snail mail is now delivered with super secure SHA-512 encryption! :laugh:
Best, Sander Continuous Integration, Delivery, and Deployment arrgh.js - Bringing LINQ to JavaScript Object-Oriented Programming in C# Succinctly
I'll be mailing them about their password-rules again then, asking for the idiot who is responsible, and their motivation. These are expensive "academics" and still they make mistakes that one expects from a first-year student.
Bastard Programmer from Hell :suss: If you can't read my code, try converting it here[^]
-
I have to login to a government site and I can set up password recovery. They need my email and a secret question and answer. I get to pick from four pre-defined questions, but they are so difficult that even I can't answer them! The easiest is the expiration date of my drivers license, but that will change once it expires and of course I won't remember what it was when I get my next drivers license. Another one is my client number of my electricity company, that only changes every year when I switch company... The answers to the questions are so hard I am literally forced to write them down somewhere (and keep copies and backups). Great job government, this will make everything so much more secure! :~ I'll just not set up password recovery and hope I'll remember this password to a service I need once or twice a year...
Best, Sander Continuous Integration, Delivery, and Deployment arrgh.js - Bringing LINQ to JavaScript Object-Oriented Programming in C# Succinctly
Don't use real data! What was the name of your first school: Trantor High Where were you born: Qronos Mothers maiden name: Iron and so on. Yes, you have to keep them somewhere but good luck to anyone trying to guess them!
Keep your friends close. Keep Kill your enemies closer. The End
-
I have to login to a government site and I can set up password recovery. They need my email and a secret question and answer. I get to pick from four pre-defined questions, but they are so difficult that even I can't answer them! The easiest is the expiration date of my drivers license, but that will change once it expires and of course I won't remember what it was when I get my next drivers license. Another one is my client number of my electricity company, that only changes every year when I switch company... The answers to the questions are so hard I am literally forced to write them down somewhere (and keep copies and backups). Great job government, this will make everything so much more secure! :~ I'll just not set up password recovery and hope I'll remember this password to a service I need once or twice a year...
Best, Sander Continuous Integration, Delivery, and Deployment arrgh.js - Bringing LINQ to JavaScript Object-Oriented Programming in C# Succinctly
I recall not too long ago, a bank I wanted to use to transfer money to another person demanded I identify myself. A list of ridiculous questions appeared, including a demand that I identify the current address of my ex-wife. We split 30 years ago and I haven't heard (thankfully) since! Morons everywhere, and we let them program computers and vote!:mad:
Will Rogers never met me.
-
I have to login to a government site and I can set up password recovery. They need my email and a secret question and answer. I get to pick from four pre-defined questions, but they are so difficult that even I can't answer them! The easiest is the expiration date of my drivers license, but that will change once it expires and of course I won't remember what it was when I get my next drivers license. Another one is my client number of my electricity company, that only changes every year when I switch company... The answers to the questions are so hard I am literally forced to write them down somewhere (and keep copies and backups). Great job government, this will make everything so much more secure! :~ I'll just not set up password recovery and hope I'll remember this password to a service I need once or twice a year...
Best, Sander Continuous Integration, Delivery, and Deployment arrgh.js - Bringing LINQ to JavaScript Object-Oriented Programming in C# Succinctly
-
I recall not too long ago, a bank I wanted to use to transfer money to another person demanded I identify myself. A list of ridiculous questions appeared, including a demand that I identify the current address of my ex-wife. We split 30 years ago and I haven't heard (thankfully) since! Morons everywhere, and we let them program computers and vote!:mad:
Will Rogers never met me.
Roger Wright wrote:
including a demand that I identify the current address of my ex-wife
Maybe it was a trick question? So, you haven't been paying your alimony Mr. Wright... :laugh: But seriously, what were they thinking? :~ It's not even any of their business where anyone except you live! An infringement on your ex's privacy by a bank that she has nothing to do with.
Best, Sander Continuous Integration, Delivery, and Deployment arrgh.js - Bringing LINQ to JavaScript Object-Oriented Programming in C# Succinctly
-
I have to login to a government site and I can set up password recovery. They need my email and a secret question and answer. I get to pick from four pre-defined questions, but they are so difficult that even I can't answer them! The easiest is the expiration date of my drivers license, but that will change once it expires and of course I won't remember what it was when I get my next drivers license. Another one is my client number of my electricity company, that only changes every year when I switch company... The answers to the questions are so hard I am literally forced to write them down somewhere (and keep copies and backups). Great job government, this will make everything so much more secure! :~ I'll just not set up password recovery and hope I'll remember this password to a service I need once or twice a year...
Best, Sander Continuous Integration, Delivery, and Deployment arrgh.js - Bringing LINQ to JavaScript Object-Oriented Programming in C# Succinctly
-
Don't use real data! What was the name of your first school: Trantor High Where were you born: Qronos Mothers maiden name: Iron and so on. Yes, you have to keep them somewhere but good luck to anyone trying to guess them!
Keep your friends close. Keep Kill your enemies closer. The End
I did that last time, made a screenshot of the form with four(!) questions and answers and saved it in a folder on my desktop. Couldn't care less if that account got hacked, jokes on the hacker, the customer account is now yours I don't want anything to do with it! :laugh:
Best, Sander Continuous Integration, Delivery, and Deployment arrgh.js - Bringing LINQ to JavaScript Object-Oriented Programming in C# Succinctly
-
I just default to 1234567890 ;)
User: Technical term used by developers. See Idiot.
That's not very secure, you old fool! ;)
Best, Sander Continuous Integration, Delivery, and Deployment arrgh.js - Bringing LINQ to JavaScript Object-Oriented Programming in C# Succinctly
-
Yeah - DoD password requirements are oppressive. A study was done a number of years ago regarding password complexity. The finding was that as complexity increases, security is reduced - because people have to write their passwords down in order to remember them, thus completely defeating the security that the demanded complexity affords. I got you beat though - along with the complexity requirements (at least 16 characters, no more than three consecutive letters or numbers, must include numbers, a mix up upper and lower case letters and special characters, no group of letter can create a word, and every time you change it, it can't be more than 50% similar to one of the last 10 passwords you used), my employer forces a password change every 15 days. This is done for our time sheet app. I mean seriously - WTF!? My strategy is to simply create a GUID in Visual Studio and submit it until one passes their absurd validation, and then save it in a text file.
".45 ACP - because shooting twice is just silly" - JSOP, 2010
-----
You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
-----
When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013Pick a word (eight character?), convert it to base-64, done.
-
That's not very secure, you old fool! ;)
Best, Sander Continuous Integration, Delivery, and Deployment arrgh.js - Bringing LINQ to JavaScript Object-Oriented Programming in C# Succinctly
-
I have to login to a government site and I can set up password recovery. They need my email and a secret question and answer. I get to pick from four pre-defined questions, but they are so difficult that even I can't answer them! The easiest is the expiration date of my drivers license, but that will change once it expires and of course I won't remember what it was when I get my next drivers license. Another one is my client number of my electricity company, that only changes every year when I switch company... The answers to the questions are so hard I am literally forced to write them down somewhere (and keep copies and backups). Great job government, this will make everything so much more secure! :~ I'll just not set up password recovery and hope I'll remember this password to a service I need once or twice a year...
Best, Sander Continuous Integration, Delivery, and Deployment arrgh.js - Bringing LINQ to JavaScript Object-Oriented Programming in C# Succinctly
What does dividing a letter by two even mean? As a developer I'd think of its ASCII integer value, but mere mortals wouldn't be asked that question. Its position in the alphabet? For odd-numbered letters, do you then round up, or down? (Once again, I'm probably overthinking this, and it wasn't the point to your post anyway...) The problem with these "secret questions" is that the answer isn't always necessarily difficult to answer. Wasn't there a well-publicized case a few years ago of some government official who managed to get some hacker to successfully go through an email password reset procedure, because all of the questions could be googled (like what high school did he go to, or the name of his dog, all of which he had answered at one point or another in various interviews or they were part of his page on Wikipedia...)? Of course being a "nobody" myself, I don't have to worry about that aspect, but still - when I'm asked these questions for an important site, the answer I provide is as long and complex and non-memorable as the output of a password generator. Which defeats the "easy to answer" purpose of these questions, but I believe those are a bad idea to begin with.
-
I have the choice to do it easy, by email. Or I can do it the hard way, visiting them at their physical address. That's not really a choice to me :laugh: Haven't you heard, your snail mail is now delivered with super secure SHA-512 encryption! :laugh:
Best, Sander Continuous Integration, Delivery, and Deployment arrgh.js - Bringing LINQ to JavaScript Object-Oriented Programming in C# Succinctly
-
The mailman will read it out loud at the door :D
Best, Sander Continuous Integration, Delivery, and Deployment arrgh.js - Bringing LINQ to JavaScript Object-Oriented Programming in C# Succinctly
-
What does dividing a letter by two even mean? As a developer I'd think of its ASCII integer value, but mere mortals wouldn't be asked that question. Its position in the alphabet? For odd-numbered letters, do you then round up, or down? (Once again, I'm probably overthinking this, and it wasn't the point to your post anyway...) The problem with these "secret questions" is that the answer isn't always necessarily difficult to answer. Wasn't there a well-publicized case a few years ago of some government official who managed to get some hacker to successfully go through an email password reset procedure, because all of the questions could be googled (like what high school did he go to, or the name of his dog, all of which he had answered at one point or another in various interviews or they were part of his page on Wikipedia...)? Of course being a "nobody" myself, I don't have to worry about that aspect, but still - when I'm asked these questions for an important site, the answer I provide is as long and complex and non-memorable as the output of a password generator. Which defeats the "easy to answer" purpose of these questions, but I believe those are a bad idea to begin with.
dandy72 wrote:
What does dividing a letter by two even mean?
Exactly, pretty impossible to answer the question, right? Let alone how you would know the name of your great great great great grandson because most people don't live that long ;) And then there are the assumptions that all those generations will have children, that specific generation will have a boy and he'll have at least two names with the second having at least three letters. That was kind of my point, those questions are impossible to answer :laugh: Funny how you were only wondering about the dividing a letter part though :laugh:
Best, Sander Continuous Integration, Delivery, and Deployment arrgh.js - Bringing LINQ to JavaScript Object-Oriented Programming in C# Succinctly
-
I just provide the same answer to all those questions. I need remember only one thing. And its very memorable.
Yeah, that's probably a better "question", a second password that you never use in case you lose your first. Because that's basically what it is :~
Best, Sander Continuous Integration, Delivery, and Deployment arrgh.js - Bringing LINQ to JavaScript Object-Oriented Programming in C# Succinctly
-
Are you my great great great great great grandson? I lose track.
User: Technical term used by developers. See Idiot.
Don't think so, as my grand grand grand grand grandpa isn't on the internet :D
Best, Sander Continuous Integration, Delivery, and Deployment arrgh.js - Bringing LINQ to JavaScript Object-Oriented Programming in C# Succinctly
-
dandy72 wrote:
What does dividing a letter by two even mean?
Exactly, pretty impossible to answer the question, right? Let alone how you would know the name of your great great great great grandson because most people don't live that long ;) And then there are the assumptions that all those generations will have children, that specific generation will have a boy and he'll have at least two names with the second having at least three letters. That was kind of my point, those questions are impossible to answer :laugh: Funny how you were only wondering about the dividing a letter part though :laugh:
Best, Sander Continuous Integration, Delivery, and Deployment arrgh.js - Bringing LINQ to JavaScript Object-Oriented Programming in C# Succinctly
-
I have to login to a government site and I can set up password recovery. They need my email and a secret question and answer. I get to pick from four pre-defined questions, but they are so difficult that even I can't answer them! The easiest is the expiration date of my drivers license, but that will change once it expires and of course I won't remember what it was when I get my next drivers license. Another one is my client number of my electricity company, that only changes every year when I switch company... The answers to the questions are so hard I am literally forced to write them down somewhere (and keep copies and backups). Great job government, this will make everything so much more secure! :~ I'll just not set up password recovery and hope I'll remember this password to a service I need once or twice a year...
Best, Sander Continuous Integration, Delivery, and Deployment arrgh.js - Bringing LINQ to JavaScript Object-Oriented Programming in C# Succinctly
Just use Keepass, or another keeper, and use their algorithm supplied passwords for those 'questions.' Far more secure, if security is your wish.
